Digital asset transaction method and system based on iris identity authentication

Abstract

The invention provides a digital asset transaction method and system based on iris identity authentication, and the method comprises the steps: obtaining a first iris template for iris matching and comparison in response to a current transaction request; replacing the selected local real features in the first iris template with false features based on a dynamic local replacement strategy so as to create a second iris template containing the real features and the false features; and obtaining iris data of a user, carrying out iris matching comparison on the iris data and the real features in the second iris template, continuing to carry out digital asset transaction under the condition of successful matching, and otherwise, refusing the current transaction request. According to the invention, even if the iris template is stolen, because the iris template has false features, illegal personnel cannot forge a correct identity by using the iris template with the false features, and even if the iris template is leaked, the digital asset transaction security can be ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of iris authentication, and in particular, to a digital asset trading method and system based on iris identity authentication. Background Art

[0002] In the field of digital asset trading, in order to improve the security and accuracy of identity verification, iris recognition technology is widely used. This technology confirms identity based on the uniqueness of the human eye iris. Since the iris pattern of each person is highly unique and stable, it is very suitable for high-security identity authentication scenarios. Users first need to input their iris templates through specialized iris scanning devices, and these templates are then encrypted and stored in the security database of the trading platform. Whenever a user attempts to conduct a transaction, the system will collect the user's iris data in real time and compare it with the pre-stored templates to confirm the user's identity.

[0003] However, although iris recognition provides strong security protection, the long-term stored iris templates are still at risk of being stolen. Once hackers break into the database and obtain this sensitive information, they may use these templates to forge identities and thus bypass security protection measures for illegal operations. Therefore, how to improve the security of digital asset trading based on iris technology has become a key problem to be solved urgently. Summary of the Invention

[0004] Embodiments of the present invention provide a digital asset trading method and system based on iris identity authentication to solve the problems existing in the related technologies. The technical solutions are as follows:

[0005] In a first aspect, embodiments of the present invention provide a digital asset trading method based on iris identity authentication, including:

[0006] Responding to a current transaction request to obtain a first iris template for iris matching and comparison;

[0007] Based on a dynamic local replacement strategy, replacing selected local real features in the first iris template with false features to create a second iris template containing real features and false features;

[0008] Obtaining the iris data of the user, performing iris matching and comparison between the iris data and the real features in the second iris template, and continuing with the digital asset trading in the case of a successful match, otherwise rejecting the current transaction request.

[0009] In an implementation manner, obtaining a first iris template for iris matching and comparison includes:

[0010] When receiving the initial transaction request, collect the iris image of the user, extract the real features of the iris image, generate an initial iris template according to the real features, and use the initial iris template as the first iris template.

[0011] In one implementation, obtaining the first iris template for iris matching and comparison includes:

[0012] Obtain the previous transaction time, obtain all template fragments corresponding to the previous transaction time from multiple specified storage spaces, and combine all template fragments to form the first iris template.

[0013] In one implementation, it further includes:

[0014] When creating the second iris template, store all the replaced real features in the specified hidden space;

[0015] Calculate the true - false ratio between the false features and the real features in the second iris template. When the true - false ratio exceeds the threshold, restore all or part of the replaced real features in the hidden space to the second iris template to replace the false features in the second iris template.

[0016] In one implementation, it further includes:

[0017] When the true - false ratio does not exceed the threshold, split the second iris template into multiple template fragments and store them in multiple specified storage spaces respectively, and mark each template fragment with the corresponding transaction time.

[0018] In one implementation, it further includes:

[0019] When creating the second iris template, hide or delete the initial iris template.

[0020] In one implementation, it further includes:

[0021] When rejecting the current transaction request, generate a rejection transaction reminder and push the rejection transaction reminder to the specified terminal for security reminder.

[0022] In a second aspect, an embodiment of the present invention provides a digital asset trading system based on iris identity authentication, which executes the digital asset trading method based on iris identity authentication as described above.

[0023] In a third aspect, an embodiment of the present invention provides an electronic device, which includes: a memory and a processor. Among them, the memory and the processor communicate with each other through an internal connection path. The memory is used to store instructions, and the processor is used to execute the instructions stored in the memory. When the processor executes the instructions stored in the memory, the processor executes the method in any implementation of the above aspects.

[0024] In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium storing a computer program, and when the computer program runs on a computer, the method in any of the above aspects is executed.

[0025] The advantages or beneficial effects in the above technical solutions at least include:

[0026] The present invention makes the first iris template locally feature-falsified to obtain a mixed second iris template, so that the second iris template contains real features and false features. During the identity verification process, only the real features in the second iris template are used for verification. To ensure the normal operation of the identity verification process, even if the iris template is stolen, due to the false features on the iris template, illegal personnel cannot forge a correct identity using the iris template with false features, and the security of digital asset transactions can be ensured even if the iris template is leaked.

[0027] The above summary is only for the purpose of the specification and is not intended to be limiting in any way. In addition to the above-described illustrative aspects, embodiments, and features, further aspects, embodiments, and features of the present invention will become apparent by reference to the drawings and the following detailed description. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] In the drawings, unless otherwise specified, the same reference numerals throughout the several views represent the same or similar components or elements. These drawings are not necessarily drawn to scale. It should be understood that these drawings only depict some embodiments disclosed in accordance with the present invention and should not be regarded as limiting the scope of the present invention.

[0029] Figure 1 It is a schematic flowchart of a digital asset trading method based on iris identity authentication according to the present invention;

[0030] Figure 2 It is a structural block diagram of an electronic device according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0031] In the following, only some exemplary embodiments are briefly described. As those skilled in the art can recognize, the described embodiments can be modified in various different ways without departing from the spirit or scope of the present invention. Therefore, the drawings and the description are considered to be exemplary in nature and not restrictive.

[0032] Embodiment 1

[0033] In the field of digital asset trading, iris recognition technology is widely used to enhance the security and accuracy of identity verification. This technology confirms identity based on the uniqueness of the human eye iris. Since each person's iris pattern is highly unique and stable, it is very suitable for high-security identity authentication scenarios. Users first need to input their iris templates through specialized iris scanning devices, and these templates are then encrypted and stored in the secure database of the trading platform. Whenever a user attempts to conduct a transaction, the system will collect the user's iris data in real time and compare it with the pre-stored templates to confirm the user's identity.

[0034] Although iris recognition provides strong security, the long-term stored iris templates still face the risk of being stolen. Once hackers break into the database and obtain this sensitive information, they may use these templates to forge identities and bypass security protection measures for illegal operations. Therefore, common information protection strategies mainly rely on encryption technology to ensure the security of iris templates and prevent unauthorized access.

[0035] However, this embodiment proposes a digital asset trading method based on iris identity authentication. This method does not rely on traditional encryption means, but enhances security by locally falsifying iris templates. Specifically, during the generation of iris templates, false feature information is selectively added to the templates. In this way, even if the iris templates are unfortunately leaked, since they are doped with false data that cannot be used for identity verification, attackers cannot use these leaked templates to forge valid identity authentication information. This method not only enhances the security of iris templates but also provides an additional protection barrier for digital asset trading. Specifically:

[0036] As Figure 1 shown, this embodiment provides a digital asset trading method based on iris identity authentication, including:

[0037] Step S1: In response to the current transaction request, obtain the first iris template for iris matching and comparison.

[0038] It should be noted that the first iris template includes two cases:

[0039] Case 1: The first iris template can be an initial iris template. Specifically:

[0040] In this embodiment, before the first transaction, the user needs to register information in advance. During the registration process, the user needs to pre-enter the user's iris image through an iris acquisition device (such as a camera), perform feature analysis on the iris image, extract the biometric points of the iris image, and use the biometric points as real features to generate an initial iris template, which contains all the necessary information for identity verification. Among them, the real features are a combination of one or more of color features, texture features, or structural features.

[0041] When receiving the current transaction request, directly use the initial iris template as the first iris template for subsequent operations.

[0042] Case 2: The first iris template can also be the hybrid iris template used for iris matching and comparison during the previous transaction.

[0043] It should be noted that the hybrid iris template refers to an iris template that has undergone one or more local feature replacements. The hybrid iris template has both real features and false features.

[0044] The method for obtaining the first iris template in this embodiment is as follows:

[0045] Step S11: Obtain the time of the previous transaction.

[0046] Step S12: Obtain all the template fragments corresponding to the time of the previous transaction from multiple specified storage spaces and combine them to form the first iris template. Only when all the template fragments are combined can the complete iris template be decrypted.

[0047] In this embodiment, since all the features of the initial iris template are real features, in order to prevent the initial iris template from being leaked, in this embodiment, after performing a local feature replacement on the initial iris template, the initial iris template is immediately hidden or deleted, so that illegal personnel cannot easily obtain the initial iris template, improving security. In subsequent transactions, mainly the iris template used in the previous transaction is used for another local feature replacement, reducing the use of the initial iris template. And performing feature replacement on the iris template during each transaction can enhance the anti-attack ability and greatly reduce the risk of the long-term stored iris template being stolen.

[0048] Step S2: Based on a dynamic local replacement strategy, replace the selected local real features in the first iris template with false features to create a second iris template that contains both real features and false features.

[0049] For situation one, that is, when the first iris template is the initial iris template, local real features in the initial iris template are selected according to a preset local replacement strategy, and the local real features selected in the preliminary iris template are replaced with false features to obtain a second iris template mixed with real features and false features.

[0050] This embodiment selects certain non-critical areas or specific feature points from the preliminary iris template as "false" targets, uses these "false" targets as selected local real features, and replaces the selected local real features in the preliminary iris template with the pre-generated false features, thereby generating a second iris template that is mixed with corresponding false features and also has real features. The number of feature replacements and the replacement positions can be automatically completed by pre-set rules or algorithms, or combined with manual review to ensure the best effect.

[0051] When replacing the selected local real features with false features, ensure that the false features can be naturally integrated with the surrounding real features; at the same time, record which parts are replaced with false features, including their locations and specific details, and avoid false features during the identity authentication process. False features are not used for effective identity authentication, and only real features are extracted for subsequent identity authentication steps.

[0052] After generating a second iris template with false features and real features, the second iris template is split into multiple template fragments, and the multiple template fragments are respectively stored in different designated storage spaces and kept by different entities; and each template fragment in each designated storage space is marked with corresponding transaction time information, that is, for the aforementioned situation one, when an initial transaction request is received, the time corresponding to the initial transaction request is marked as the transaction time on multiple template fragments of the second iris template, so that the second iris template used in the previous transaction can be quickly found according to the marked transaction time in the next transaction.

[0053] When each subsequent transaction is completed, the second iris template generated after the local feature replacement in each transaction process will be split and stored, and each template fragment of the stored second iris template will be marked with time for easy searching.

[0054] As for the second situation, all template fragments of the first iris template of the last transaction are obtained according to the time of the last transaction. After the fragments are spliced, local features of the first iris template are replaced based on the local replacement strategy to obtain the second iris template. The method is the same as that described in the first situation and will not be repeated here.

[0055] It should be noted that the local replacement strategy for local feature replacement can be dynamic, that is, replacing the selected local real features. The selection rule is not fixed and can be determined according to factors such as timestamps, user behavior patterns, or other random factors to increase unpredictability.

[0056] For example, a random number generator can be used to determine the feature points to be replaced; or the current timestamp, user behavior data (such as the number of logins, the time of the last login), or other dynamic variables can be used as inputs, and the position of the feature points to be replaced can be calculated through a predefined algorithm, thereby increasing the difficulty for attackers to predict which parts will be replaced.

[0057] In addition, predefined false features can be added to the selected area in the first iris template; or, the selected local real features in the first iris template can be deleted, etc., so that the second iris template formed after replacement is different from the first iris template before replacement. Even if the iris template is leaked, correct authentication information cannot be forged.

[0058] For example, assume that a specific area in the first iris template contains a set of feature points A, B, and C. If the real feature B is replaced with D, then the feature points contained in the specific area of the second iris template after replacement are A, D, and C. Or, assume that a specific area in the first iris template contains a set of feature points A, B, and C. The system may add some additional false points D and E in this area, and at the same time remove or modify point B to form a new feature combination A, C, D, and E. The rules of the local replacement strategy can be preset according to the actual situation.

[0059] Furthermore, whenever a second iris template is generated, all the real features being replaced can be stored in a specified hidden space. At the same time, record the positions of each real feature being replaced in the iris template; and calculate the true-false ratio between the false features and the real features in the second iris template. Assume that the true-false ratio exceeds the threshold, which means there are fewer real features in the second iris template. In this case, it is not conducive to accurate authentication. At this time, all or part of the real features being replaced in the hidden space can be restored to their original positions in the second iris template to replace the false features in the second iris template and increase the proportion of real features in the second iris template to improve verification accuracy.

[0060] Assume that the true-false ratio does not exceed the threshold, which means there are relatively more real features in this second iris template and it can be directly used for subsequent iris matching and comparison. At this time, the generated second iris template can be split into multiple template fragments and stored in multiple specified storage spaces respectively for subsequent iris matching and comparison.

[0061] Step S3: Obtain the user's iris data, perform iris matching and comparison between the iris data and the real features in the second iris template. If the matching is successful, continue with the digital asset transaction; otherwise, reject the current transaction request.

[0062] It should be noted that the iris data collected at this time is the iris data collected by the user when initiating the current transaction request, and this iris data is used for the current user authentication, rather than the iris image collected during the registration phase.

[0063] Perform iris matching and comparison between the iris data and the second iris template. Specifically, avoid the false features in the second iris template and only extract the real features in the second iris template. Match and compare the real features with the user's iris data. If the iris data and the real features match successfully, the subsequent digital asset transaction can continue; if the matching is unsuccessful, it means that the identity authentication is unsuccessful, and the current transaction is stopped at this time.

[0064] When the current transaction is stopped, that is, when the current transaction request is rejected, generate a rejection transaction reminder and push the rejection transaction reminder to the specified terminal for security reminder, reminding the user that they can re-enter their iris data to perform identity authentication again.

[0065] This embodiment uses a local replacement strategy to perform local feature replacement on the first iris template. Even if the generated second iris template is unfortunately leaked, the attacker cannot successfully forge a legitimate identity authentication request due to the lack of knowledge about which parts are false features. This method effectively improves the security of the iris template while maintaining a high recognition accuracy.

[0066] Embodiment Two

[0067] The present invention provides a digital asset trading system based on iris identity authentication, and this system executes the digital asset trading method based on iris identity authentication as described in Embodiment One. This system includes:

[0068] A transaction response module, in response to the current transaction request, obtains the first iris template for iris matching and comparison;

[0069] A feature replacement module, which is used to replace the selected local real features in the first iris template with false features according to a dynamic local replacement strategy to create a second iris template containing real features and false features;

[0070] An iris comparison module, which is used to obtain the user's iris data, perform iris matching and comparison between the iris data and the real features in the second iris template. If the matching is successful, continue with the digital asset transaction; otherwise, reject the current transaction request.

[0071] In this embodiment, the first iris template is partially falsified to obtain a mixed second iris template, so that the second iris template contains both real features and false features. During the identity verification process, only the real features in the second iris template are used for verification. To ensure the normal operation of the identity verification process, even if the iris template is stolen, since the iris template has false features, illegal personnel cannot forge a correct identity using the iris template with false features, and the security of digital asset transactions can be ensured even if the iris template is leaked.

[0072] It should be noted that for the functions of each module in the system of the embodiment of the present invention, reference can be made to the corresponding descriptions in the above method, and details are not described herein again.

[0073] Embodiment Three

[0074] This embodiment provides an electronic device. Figure 2 The structural block diagram of the electronic device according to an embodiment of the present invention is shown. As Figure 2 shown, the electronic device includes: a memory 100 and a processor 200, and a computer program that can run on the processor 200 is stored in the memory 100. When the processor 200 executes the computer program, the digital asset trading method based on iris identity authentication in the above embodiment is implemented. The number of the memory 100 and the processor 200 can be one or more.

[0075] The electronic device further includes:

[0076] A communication interface 300, which is used to communicate with external devices and perform data interaction and transmission.

[0077] If the memory 100, the processor 200, and the communication interface 300 are implemented independently, the memory 100, the processor 200, and the communication interface 300 can be interconnected through a bus and communicate with each other. The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc.

[0078] Optionally, in specific implementation, if the memory 100, the processor 200, and the communication interface 300 are integrated on a single chip, the memory 100, the processor 200, and the communication interface 300 can communicate with each other through an internal interface.

[0079] An embodiment of the present invention provides a computer-readable storage medium storing a computer program, which when executed by a processor implements the method provided in the embodiment of the present invention.

[0080] An embodiment of the present invention further provides a chip, which includes a processor for calling and running instructions stored in a memory, so that a communication device installed with the chip executes the method provided in the embodiment of the present invention.

[0081] An embodiment of the present invention further provides a chip, including: an input interface, an output interface, a processor, and a memory. The input interface, the output interface, the processor, and the memory are connected through an internal connection path. The processor is used to execute the code in the memory. When the code is executed, the processor is used to execute the method provided in the embodiment of the invention.

[0082] It should be understood that the above-mentioned processor may be a central processing unit (CPU), or may also be other general-purpose processors, digital signal processors (DSPs), application specific integrated circuits (ASICs), field programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or any conventional processor, etc. It is worth noting that the processor may be a processor supporting the advanced RISC machines (ARM) architecture.

[0083] Further, optionally, the above-mentioned memory may include a read-only memory and a random access memory, and may further include a non-volatile random access memory. The memory may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may include a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may include a random access memory (RAM), which is used as an external cache. By way of example but not limitation, many forms of RAM are available. For example, static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM), and direct rambus random access memory (DR RAM).

[0084] In the above embodiments, it may be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented using software, it may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the processes or functions according to the present invention are generated in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium.

[0085] In the description of this specification, the descriptions referring to terms such as "one embodiment", "some embodiments", "examples", "specific examples", or "some examples", etc. mean that the specific features, structures, materials, or characteristics described in connection with the embodiment or example are included in at least one embodiment or example of the present invention. Moreover, the specific features, structures, materials, or characteristics described may be combined in a suitable manner in any one or more embodiments or examples. In addition, without contradiction, those skilled in the art can combine and combine the different embodiments or examples described in this specification and the features of different embodiments or examples.

[0086] In addition, the terms "first" and "second" are only used for descriptive purposes and cannot be understood as indicating or implying relative importance or implicitly specifying the quantity of the indicated technical features. Thus, the features defined with "first" and "second" may explicitly or implicitly include at least one of such features. In the description of the present invention, "a plurality of" means two or more, unless otherwise specifically defined.

[0087] As described above, it is only the specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art within the technical scope disclosed by the present invention can easily think of various changes or substitutions, and these should all be covered by the protection scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.

Claims

1. A digital asset trading method based on iris identity authentication, characterized in that Including: In response to a current transaction request, obtaining a first iris template for iris matching and comparison; Based on a dynamic local replacement strategy, replacing selected local true features in the first iris template with false features to create a second iris template including true features and false features; Obtaining the user's iris data, performing iris matching and comparison between the iris data and the true features in the second iris template, and continuing with the digital asset transaction if the matching is successful, otherwise rejecting the current transaction request.

2. The digital asset trading method based on iris identity authentication according to claim 1, wherein The obtaining the first iris template for iris matching and comparison includes: When receiving a primary transaction request, collecting the user's iris image, extracting the true features of the iris image, generating an initial iris template according to the true features, and using the initial iris template as the first iris template.

3. The digital asset trading method based on iris identity authentication according to claim 1, characterized in that The obtaining the first iris template for iris matching and comparison includes: Obtaining the previous transaction time, obtaining all template fragments corresponding to the previous transaction time from multiple specified storage spaces, and combining all template fragments to form the first iris template.

4. The digital asset trading method based on iris identity authentication according to claim 1, wherein Further including: When creating the second iris template, storing all the replaced true features in a specified hidden space; Calculating the true-false ratio between the false features and the true features in the second iris template, and if the true-false ratio exceeds a threshold, restoring all or part of the replaced true features in the hidden space to the second iris template to replace the false features in the second iris template.

5. The digital asset trading method based on iris identity authentication according to claim 4, characterized in that, Further including: If the true-false ratio does not exceed the threshold, splitting the second iris template into multiple template fragments and storing them in multiple specified storage spaces respectively, and marking each template fragment with the corresponding transaction time.

6. The digital asset trading method based on iris identity authentication according to claim 1, wherein, Further including: When creating the second iris template, hiding or deleting the initial iris template.

7. The digital asset trading method based on iris identity authentication according to claim 1, wherein Further including: When rejecting the current transaction request, generating a rejection transaction reminder and pushing the rejection transaction reminder to a specified terminal for security reminder.

8. A digital asset trading system based on iris identity authentication, characterized in that, Performing the digital asset transaction method based on iris identity authentication according to any one of claims 1 to 7.

9. An electronic device, characterized in that, Including: A processor and a memory, wherein instructions are stored in the memory, and the instructions are loaded and executed by the processor to implement the digital asset transaction method based on iris identity authentication according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, A computer program is stored in the computer-readable storage medium, and when the computer program is executed by a processor, it implements the digital asset transaction method based on iris identity authentication according to any one of claims 1 to 7.

Images